Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-2940
HistoryAug 14, 2008 - 12:00 a.m.

CVE-2008-2940

2008-08-1400:00:00
ubuntu.com
ubuntu.com
6

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%

The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP)
1.6.7 allows local users to gain privileges and send e-mail messages from
the root account via vectors related to the setalerts message, and lack of
validation of the device URI associated with an event message.

Notes

Author Note
mdeslaur code was removed in upstream 2.8.5
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchhplip< 0.9.7-4ubuntu1.1UNKNOWN
ubuntu7.10noarchhplip< 2.7.7.dfsg.1-0ubuntu5.1UNKNOWN
ubuntu8.04noarchhplip< 2.8.2-0ubuntu8.1UNKNOWN

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.4%